{"id":4339,"date":"2019-03-29T14:34:58","date_gmt":"2019-03-29T18:34:58","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=4339"},"modified":"2019-09-18T15:55:54","modified_gmt":"2019-09-18T19:55:54","slug":"nearly-one-billion-emails-leaked-online-by-unprotected-database","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/","title":{"rendered":"Nearly One Billion Emails Leaked Online by Unprotected Database"},"content":{"rendered":"

\"Nearly<\/p>\n

In what some experts call one of the most largest and comprehensive email breaches of all time, nearly one billion emails have been exposed by a little-known marketing company called Verifications.io.<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

Security researchers Bob Diachenko and Vinny Troia discovered the exposure in late February. The database possessed no authentication protocols whatsoever<\/a>; in fact, anyone with an internet connection could access the email records. Moreover, the email records also contained other personal identifying information such as names, genders, IP addresses, and much more. The researchers contacted Verifications.io immediately; the company confirmed the exposure and claimed to close it the same day. \u00a0<\/span><\/p>\n

Verifications.io labeled itself as an enterprise email verification service, allowing businesses to confirm harvested emails. However, Diachenko noted that threat actors could have used the service to refine their phishing attacks. The site went offline in early March; additionally, company representatives remain largely unresponsive to questions by the press, prompting more questions about the company. \u00a0\u00a0<\/span><\/p>\n

When the researchers first announced the breach, the records exposed appeared to only number around 700 million. However, in subsequent weeks, the number of discovered records exposed rose. <\/span><\/p>\n

What One Billion Emails Exposed Means<\/b><\/h2>\n

We asked a few cybersecurity experts to weigh in on the implications of Verifications.io and the exposure of nearly one billion email records. Here\u2019s what they had to say: <\/span><\/p>\n

Franklyn Jones, CMO,<\/b> Cequence Security<\/b><\/a>:<\/b><\/span><\/h3>\n

\u201cWe\u2019re getting to the point where breaches of this magnitude barely illicit a yawn. And after a week, our attention will be diverted once again to the next major breach. \u00a0Meanwhile, what often gets ignored is that these 982 million records will find their way on the dark web, where they will be acquired for secondary attacks \u2013 usually involving automating bots \u2013 that result in account takeover, business logic abuse, financial fraud, and more.\u201d<\/span><\/p>\n

Byron Rashed, VP of Marketing, <\/b>Centripetal Networks<\/b><\/a>:<\/b><\/span><\/h3>\n

“Businesses and consumers should always verify and deal with trusted businesses. In today\u2019s digital environment, giving electronic information out <\/span>about one\u2019s self is exposing the individual to a variety of cyber crimes. Credentials can be leveraged by a threat actor for identity theft on a personal <\/span>level and corporate network infiltration and data exfiltration for businesses. <\/span><\/p>\n

Enterprises should enable blocking of such malicious sources, which is key to preventing network infiltration and reducing and mitigating the risk of data exfiltration. Corporate policy should govern and prevent the use of their corporate credentials on non-work related sites as well. Education of employees is always the best first line of defense, since most breaches are caused by human error.”<\/span><\/p>\n


Widget not in any sidebars
\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

In what some experts call one of the most largest and comprehensive email breaches of all time, nearly one billion emails have been exposed by a little-known marketing company called Verifications.io. Security researchers Bob Diachenko and Vinny Troia discovered the exposure in late February. The database possessed no authentication protocols whatsoever; in fact, anyone with […]<\/p>\n","protected":false},"author":41,"featured_media":3663,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[6],"tags":[142,125,16,112,415,76,70,30,1121],"acf":[],"yoast_head":"\nNearly One Billion Emails Leaked Online by Unprotected Database<\/title>\n<meta name=\"description\" content=\"Nearly one billion emails have been exposed by a little-known marketing company called Verifications.io. What does this mean for enterprises?\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/\",\"name\":\"Nearly One Billion Emails Leaked Online by Unprotected Database\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod.jpg\",\"datePublished\":\"2019-03-29T18:34:58+00:00\",\"dateModified\":\"2019-09-18T19:55:54+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"Nearly one billion emails have been exposed by a little-known marketing company called Verifications.io. What does this mean for enterprises?\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"Nintendo Breach: What to Know and Expert Commentary\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Nearly One Billion Emails Leaked Online by Unprotected Database\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Nearly One Billion Emails Leaked Online by Unprotected Database","description":"Nearly one billion emails have been exposed by a little-known marketing company called Verifications.io. What does this mean for enterprises?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/","url":"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/","name":"Nearly One Billion Emails Leaked Online by Unprotected Database","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod.jpg","datePublished":"2019-03-29T18:34:58+00:00","dateModified":"2019-09-18T19:55:54+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"Nearly one billion emails have been exposed by a little-known marketing company called Verifications.io. What does this mean for enterprises?","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod.jpg","width":800,"height":400,"caption":"Nintendo Breach: What to Know and Expert Commentary"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/nearly-one-billion-emails-leaked-online-by-unprotected-database\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Nearly One Billion Emails Leaked Online by Unprotected Database"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4339"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=4339"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4339\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/3663"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=4339"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=4339"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=4339"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}